今日共收录 1701 条安全情报，包含 827 个 CVE，444 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-74836
Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows an unauthenticated remote at
CVE-2026-73137
A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management (RHACM). A te
CVE-2026-73040
Dockge validates a stack name only on the write path. In backend/stack.ts the allow-list check in validate(), which requ
CVE-2026-70654
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, applications that define unus
CVE-2026-70653
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, the old-style Radiance RLE de
CVE-2026-70652
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built with libultrahd
CVE-2026-70651
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff
CVE-2026-69242
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, a crafted many-band TIFF proc
CVE-2026-68921
DiceBear is an avatar library for designers and developers. Prior to 9.4.3, @dicebear/core interpolates the rotate optio
CVE-2026-67446
Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit decodes attacker-supplied image attach
CVE-2026-67445
Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit reads SMTP commands through internal/s
CVE-2026-53804
OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that al
CVE-2026-52021
An issue in code100xDevs 100xdevs CMS v.1.0 (2026-04-30) allows a remote attacker to obtain sensitive information via th
CVE-2026-43798
A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controll
CVE-2026-19755
NoSleep 1.5.1 exposes a privileged XPC Mach service and accepts raw dictionary messages containing attacker-controlled c
CVE-2026-18420
Improper input validation in the Time Series Visual Builder (TSVB) plugin in OpenSearch Dashboards allows an authenticat
CVE-2026-77151
A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of t
CVE-2026-75910
Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to
CVE-2026-72861
The github-issue-bot templates in appwrite/templates verify the GitHub webhook signature with an inverted condition. ver
CVE-2026-63723
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.